Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3c184705-67ad-30da-934d-a10dc3813f2d.roa
File:                     3c184705-67ad-30da-934d-a10dc3813f2d.roa (raw, json)
Hash identifier:          F2O6kMzVs8spe7umkG1/eqQmP2Zhcjh9xUpaAghOkf8=
Subject key identifier:   4C:6C:B6:BD:AA:65:BA:42:95:7C:21:68:0B:FB:DD:1B:FA:9D:4B:7B
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584834556C37AC043C6B81F82640
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3c184705-67ad-30da-934d-a10dc3813f2d.roa
Signing time:             Sat 14 Dec 2024 14:00:52 +0000
ROA not before:           Sat 14 Dec 2024 14:00:52 +0000
ROA not after:            Fri 14 Mar 2025 13:00:52 +0000
asID:                     203
IP address blocks:        130.174.68.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:34:55:6c:37:ac:04:3c:6b:81:f8:26:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Dec 14 14:00:52 2024 GMT
            Not After : Mar 14 13:00:52 2025 GMT
        Subject: CN=c755ead7-f99a-4e03-b6de-e12a8fb54148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e8:cd:4b:9b:47:54:7e:fc:27:7b:c7:ff:7f:
                    17:4f:4b:08:06:af:55:ef:65:e8:57:c2:b5:50:8d:
                    f1:35:14:7a:57:f3:19:89:ef:84:0c:cf:cc:9d:7f:
                    48:22:f2:ae:61:01:42:8c:58:19:60:69:d8:f1:e7:
                    48:eb:bf:aa:b9:b5:24:2f:d3:5b:35:43:c5:b8:83:
                    17:64:8b:9d:5a:af:76:97:0d:b9:75:4a:d5:fc:95:
                    0b:fc:f1:c0:38:15:8a:14:f0:98:f5:88:28:e0:8f:
                    2b:fb:8a:de:70:9e:4e:f4:18:98:e4:f4:9e:dd:45:
                    69:9c:03:d8:ed:76:98:c0:50:fd:68:f9:90:5d:8c:
                    a6:1d:59:0f:c0:58:3b:74:e7:3f:a8:17:eb:78:0a:
                    79:28:50:19:74:0a:99:4d:e6:bd:89:88:90:09:03:
                    3e:be:99:4e:07:1d:a8:99:21:5f:9b:7d:a4:02:b3:
                    84:9b:af:21:fd:32:9a:4a:69:07:84:de:38:fb:ea:
                    25:b4:a7:80:0c:45:b5:93:59:08:58:eb:24:61:cc:
                    6d:28:34:e6:7a:88:6f:f8:29:85:f6:46:ef:2e:f1:
                    21:ab:ba:4e:7d:ff:23:2d:06:3f:1a:f6:16:3d:89:
                    58:97:56:16:3e:f4:c7:2b:53:ef:bc:60:d1:93:9c:
                    53:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:6C:B6:BD:AA:65:BA:42:95:7C:21:68:0B:FB:DD:1B:FA:9D:4B:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3c184705-67ad-30da-934d-a10dc3813f2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:0a:1b:c5:79:f7:bc:0b:ff:7e:45:29:f2:05:f3:92:70:98:
         c8:59:86:48:b3:22:4c:84:6f:b1:f8:af:19:9e:6b:ff:58:88:
         32:ae:6e:51:7c:38:85:56:22:de:ce:99:0d:cc:58:aa:a4:05:
         c1:31:32:67:d9:48:21:70:de:81:6a:64:a4:6a:7c:7c:cf:44:
         23:27:c9:71:74:e9:13:4a:d5:b3:3a:57:9c:81:83:c9:65:7c:
         90:55:c3:d8:ef:93:a7:00:be:23:83:79:9f:86:3e:dd:e5:86:
         25:6c:5b:39:25:05:99:57:c6:19:1d:d5:ed:c7:da:eb:7c:e4:
         37:83:e0:bf:7e:f8:c0:a3:96:e8:be:3f:a2:79:1f:67:f2:e1:
         82:70:5f:6c:5d:23:5b:44:a6:4e:41:ec:e0:1f:41:83:5b:d1:
         7c:4b:f6:1c:ff:af:ca:de:71:6d:82:d5:69:93:a4:10:2e:6b:
         49:5e:de:71:52:59:70:fb:99:7a:53:d8:a0:56:28:99:a5:6b:
         7b:a3:44:48:c6:42:a1:12:ec:85:aa:0d:83:59:ef:82:17:6e:
         17:2c:55:cd:ec:eb:21:8e:43:92:11:f5:1e:dd:19:14:9f:4d:
         10:5e:12:f7:4b:a9:f6:cf:55:0d:c9:13:3b:d6:ce:e4:0f:d3:
         71:30:e5:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:35:08 2025 by rpki-client